Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5The devices do not implement any authentication for the web interface or the MQTT server.Check if you run itEPSS 0.45%May 21, 2025
- Medium5.1A low-privileged user is able to obtain information about tasks executed on devices controlled by Proget MDM (Mobile Device Management), as well as details of the devices like theiCheck if you run itEPSS 0.21%May 21, 2025
- High7.2The Glossary by WPPedia – Best Glossary plugin for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.0 via deserializatCheck if you run itEPSS 0.74%May 21, 2025
- Medium6.4The Raisely Donation Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's raisely_donation_form shortcode in all versions up to, and including, 1Check if you run itEPSS 0.32%May 21, 2025
- High8.7Smartbedded Meteobridge Command Injection VulnerabilityPatch nowKEVEPSS 93.31%May 21, 2025
- Critical9.8The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to brutefoCheck this weekEPSS 16.43%May 21, 2025
- Medium6.5A vulnerability was found in the libsoup package.Check if you run itEPSS 0.91%May 21, 2025
- Medium6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in Vtiger CRM Open Source Edition v8.3.0, exploitable via the Services Import feature.Check if you run itEPSS 0.31%May 21, 2025
- Medium6.5FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ipv4Aclkey parameter in the web_acl_ipv4BasedAceAdd function.Check if you run itEPSS 0.30%May 21, 2025
- Medium6.5FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ownekey parameter in the web_rmon_alarm_post_rmon_alarm function.Check if you run itEPSS 0.30%May 21, 2025
- Critical9.1IEEE P802.11-REVme D1.1 through D7.0 allows FragAttacks against mesh networks.Check if you run itEPSS 0.31%May 21, 2025
- Medium6.5Local File Inclusion vulnerability in Vasco v3.14and before allows a remote attacker to obtain sensitive information via help menu.Check if you run itEPSS 0.43%May 21, 2025
- Medium6.5AAPanel v7.0.7 was discovered to contain an OS command injection vulnerability.Check if you run itEPSS 0.92%May 21, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() The function brcmf_usb_dl_writeimage() cCheck if you run itEPSS 0.24%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: pds_core: Prevent possible adminq overflow/stuck condition The pds_core's adminq is protected by the adminq_lockCheck if you run itEPSS 0.19%May 20, 2025
- High7.0In the Linux kernel, the following vulnerability has been resolved: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() Herbert notes that DIV_ROUND_UP() may overfloCheck if you run itEPSS 0.19%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: qibfs: fix _another_ leak failure to allocate inode => leaked dentry...Check if you run itEPSS 0.19%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: wl1251: fix memory leak in wl1251_tx_work The skb dequeued from tx_queue is lost when wl1251_ps_elp_wakeupCheck if you run itEPSS 0.20%May 20, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in blk_register_queue() error path When registering a queue fails after blk_mq_sysfs_reCheck if you run itEPSS 0.19%May 20, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation Currently during the multi-liCheck if you run itEPSS 0.24%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix deadlock This patch introduces the ucsi_con_mutex_lock / ucsi_con_mutex_unlocCheck if you run itEPSS 0.16%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL When userspace does PR_SET_TAGGED_ADDR_CTRL, but Supm extCheck if you run itEPSS 0.16%May 20, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: x86/mm: Eliminate window where TLB flushes may be inadvertently skipped tl;dr: There is a window in the mm switcCheck if you run itEPSS 0.21%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parse_lease_state() The previous patch that added bounds check for create lease contexCheck if you run itEPSS 0.19%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: memblock: Accept allocated memory before use in memblock_double_array() When increasing the array size in membloCheck if you run itEPSS 0.19%May 20, 2025
Sort